Allow these card images to be visible to other subscribers on PackStorm.
This will permanently delete your account, scan history, collection, and uploaded images. Your active subscription will be canceled immediately with no refund. This cannot be undone.
Type DELETE to confirm:
Unlock premium features with a subscription
Enter your 12-character code to activate a free 30-day Plus subscription.
Last updated: May 2026
PackStorm (the "Service") is operated by an individual sole trader based in Germany (the "Operator"). The Operator's full name, postal address, and other mandatory identification details are provided in the Imprint (Impressum), available at any time within the app. For all communications related to these Terms, the Service, your account, billing, or legal notices, contact: official.packstorm@gmail.com.
These Terms of Service ("Terms") form a binding agreement between you ("you", "User") and the Operator. By creating an account, accessing, or using the Service in any way, you confirm that you have read, understood, and agree to be bound by these Terms. If you do not agree, do not create an account and do not use the Service.
PackStorm is a mobile and web application that lets users photograph trading cards and receive automated identification, descriptive information, and estimated market value generated by third-party artificial intelligence systems. The Service also provides personal collection management, scan history, and related features. All outputs are estimates produced by automated systems and may be inaccurate or incomplete.
You must be at least 18 years old and have full legal capacity to contract under the law of your country of residence in order to register and use the Service. If the Service is used by a minor, the parent or legal guardian who registered the account is the User for the purposes of these Terms and is fully responsible for all activity on the account, all charges, and all compliance obligations.
To use most features you must create an account using a valid email address and a password. You agree to provide accurate information, to keep your login credentials confidential, and not to share, sell, transfer, lend, or otherwise allow third parties to use your account. You are responsible for all activity that occurs under your account. You must notify the Operator promptly at the contact email above if you suspect unauthorized access. The Operator may suspend or terminate accounts that violate these Terms, that are inactive for extended periods, or whose activity threatens the security or integrity of the Service.
Certain features of the Service are available only through a paid subscription. Subscriptions are sold in monthly tiers ("Basic", "Plus", "Premium") at the prices displayed in the app at the time of purchase. Payments are processed exclusively through PayPal; by subscribing you also accept PayPal's own terms and authorize PayPal to charge the applicable amount to your funding source on the recurring billing date.
Subscriptions automatically renew at the end of each billing period at the then-current price until cancelled by you. You may cancel at any time from within the app; cancellation takes effect at the end of the current paid period and you keep access until then. You will not be charged again after cancellation unless you re-subscribe.
When a subscription's monthly usage allowance is exhausted, you may purchase additional usable balance ("Extra Balance") as a one-time top-up. A defined portion of the amount you pay is credited to your account as Extra Balance and consumed at the actual processing cost of each subsequent scan, as displayed in the app at the time of purchase. Extra Balance is non-refundable once credited, cannot be transferred between accounts, has no monetary value outside the Service, and cannot be redeemed for cash. Extra Balance can only be consumed while your subscription is active; if your subscription ends, the Extra Balance remains on your account but becomes unusable until a subscription is reactivated.
The Operator may from time to time distribute redemption codes that grant a limited, time-bound subscription benefit. Each code is single-use, non-transferable, has no monetary value, and may not be sold, resold, or exchanged. Subscriptions granted through a redemption code cannot be cancelled and end automatically when their duration expires. Codes obtained through fraud, abuse, or unauthorized distribution may be invalidated at any time without notice or compensation.
All payments to the Service — including subscriptions, renewals, and Extra Balance top-ups — are final and non-refundable, to the maximum extent permitted by applicable law. This includes unused portions of any billing period.
If you are a consumer resident in the European Union, the European Economic Area, the United Kingdom, or any other jurisdiction that grants a statutory right of withdrawal for digital content and services: by completing your purchase, activating your subscription, redeeming a code, or scanning your first card following a purchase, you expressly request that the Service begin immediately and you expressly acknowledge that, by doing so, you lose your statutory right of withdrawal pursuant to § 356(5) of the German Civil Code (BGB) and the corresponding provisions of EU Directive 2011/83/EU. No refund will be issued once the Service has been performed.
Mandatory statutory rights that cannot be waived under the law of your country of residence remain unaffected by this clause.
The Operator may change subscription prices, tier features, billing intervals, or allowance limits at any time. Material changes affecting an existing subscription will be communicated to you at the email address associated with your account at least thirty (30) days before the change takes effect. If you do not agree to a change, your only remedy is to cancel before the change takes effect; continued use after the effective date constitutes acceptance.
You agree not to: (a) use the Service in violation of any applicable law or regulation; (b) upload, transmit, or otherwise submit content that is illegal, harmful, infringing, defamatory, sexually explicit, or otherwise objectionable; (c) submit images that are not your own and that you do not have the right to upload; (d) submit any image that depicts the face of a person other than yourself outside the boundaries of a trading card; (e) attempt to gain unauthorized access to the Service, other users' accounts, or any underlying infrastructure; (f) reverse-engineer, decompile, scrape, mirror, or otherwise extract source code, data, or APIs from the Service; (g) interfere with, overload, or disrupt the Service or its servers; (h) use the Service to develop a competing product; (i) circumvent or abuse usage limits, subscriptions, payments, redemption codes, or any access control. The Operator may immediately suspend or terminate an account for any breach of this section.
You retain all rights you may hold in the images and content you submit to the Service ("User Content"). By submitting User Content, you grant the Operator a worldwide, non-exclusive, royalty-free, sublicensable licence to host, store, copy, process, transmit, display, modify (e.g. resize, compress, rotate), and use that User Content solely to (i) provide and operate the Service, (ii) generate identification and pricing estimates through third-party AI systems, (iii) maintain your collection and history, and (iv) improve the Service.
If you opt in via the publishing setting, you additionally grant the Operator a perpetual, worldwide, royalty-free right to display the images of your scanned cards publicly to other Service users alongside the corresponding card record. You may withdraw this consent at any time from within the app, which stops any further publishing; however, images already made public become part of the Service's card database, are no longer linkable to your account, and need not be removed retrospectively. Full account deletion via the in-app function removes all remaining data still linkable to you.
You represent and warrant that you own all rights in the User Content you submit, or that you have all necessary permissions to grant the licence above, and that your User Content does not infringe any third party's rights.
All card identification, descriptions, rarity assessments, and price estimates provided by the Service are produced by automated artificial-intelligence systems on the basis of the images you submit and publicly available data. Such information is provided for general informational purposes only. It may be incomplete, outdated, or factually incorrect. The Service is not, and does not provide, financial, investment, appraisal, grading, or legal advice. You must not rely on the Service for buying, selling, trading, insurance, taxation, or any other financial decision, and you accept full responsibility for any decisions you take based on the Service's output.
Card names, artwork, set names, logos, character likenesses, and other trademarks shown by the Service belong to their respective rights holders (e.g., card publishers, leagues, franchises, artists). Their appearance in the Service is descriptive and nominative only; it does not imply any endorsement, affiliation, sponsorship, or licence between those rights holders and the Operator. If you are a rights holder and believe content displayed by the Service infringes your rights, contact the email above and we will address it within a reasonable time.
The Service is provided on an "as is" and "as available" basis. The Operator does not guarantee that the Service will be uninterrupted, error-free, secure, free of malicious code, or available at any particular time or place. Maintenance, updates, third-party outages (including OpenAI, PayPal, and hosting providers), force majeure events, and other circumstances may cause downtime or feature degradation. The Operator reserves the right to modify, suspend, or discontinue the Service or any part of it at any time, with or without notice.
The Operator is liable without limitation for damages caused by intent or gross negligence, for personal injury, for liability under the German Product Liability Act (Produkthaftungsgesetz), and for any other liability that cannot be limited or excluded under mandatory law.
For slight negligence, the Operator is liable only where an essential contractual obligation ("Kardinalpflicht") — meaning an obligation whose fulfilment is necessary to make proper performance of the contract possible at all and on whose fulfilment you may regularly rely — has been breached, and only up to the amount of foreseeable damage typical for this type of contract.
All other liability of the Operator, including for indirect or consequential damages, lost profits, lost business opportunities, lost or corrupted data, third-party claims, and inaccurate AI-generated information, is excluded to the maximum extent permitted by law. You are responsible for maintaining your own records and backups of any data that is important to you.
You agree to indemnify and hold the Operator harmless from any third-party claim, demand, loss, or liability (including reasonable legal fees) arising out of (a) your breach of these Terms, (b) your violation of applicable law, (c) your infringement of any third party's rights, or (d) the content you submit to the Service. This clause does not apply where mandatory law assigns liability differently.
You may terminate your account at any time using the "Delete Account" function in settings. Termination is immediate and irreversible. Active subscriptions are cancelled and no refund is issued for the remainder of any paid period or for any unused Extra Balance. The Operator may suspend or terminate your account at any time for breach of these Terms, suspected fraudulent activity, abuse, prolonged inactivity, or for any other reason permitted by law, with or without prior notice.
The Operator may amend these Terms at any time. The current version is always displayed within the app. If the changes are material, the Operator will notify you in advance by email at the address linked to your account. If you do not agree to the amended Terms, you must stop using the Service and may delete your account; continued use of the Service after the changes take effect constitutes acceptance.
These Terms and any non-contractual obligations arising out of or in connection with them are governed by the substantive law of the Federal Republic of Germany, to the exclusion of the United Nations Convention on Contracts for the International Sale of Goods (CISG) and conflict-of-laws rules.
If you are a consumer with habitual residence in the European Union, this choice of law does not deprive you of the protection of the mandatory provisions of the law of your country of residence.
Place of jurisdiction for all disputes arising out of or in connection with these Terms is, to the extent legally permissible, the competent court at the Operator's registered place of business in Germany. Consumers may also sue and be sued at their place of residence under the rules of mandatory consumer-protection law.
The European Commission provides a platform for online dispute resolution at https://ec.europa.eu/consumers/odr. The Operator is not obligated and not willing to participate in dispute resolution proceedings before a consumer arbitration board.
If any provision of these Terms is held invalid, unenforceable, or void by a competent court, the remaining provisions remain in full force. The invalid or unenforceable provision shall be replaced by a valid one whose economic effect comes as close as legally permitted to the intended effect of the original provision.
All notices, questions, complaints, or legal requests relating to these Terms must be sent to: official.packstorm@gmail.com. Postal address and other identification details of the Operator are provided in the Imprint (Impressum).
Last updated: May 2026
The controller responsible for the processing of personal data within the meaning of Art. 4(7) GDPR is:
Hariton Stuckert
Hans-Kopp-Straße 11
67227 Frankenthal
Germany
Email: official.packstorm@gmail.com
No data protection officer is designated, as PackStorm does not meet the thresholds for mandatory designation under Art. 37 GDPR.
(a) Account data — your email address and a cryptographically hashed password (Argon2). Where you have changed your email, we retain previous email addresses solely so PayPal webhooks for delayed events can still be matched to your account.
(b) Authentication data — session tokens stored as a cookie ("token") on your device and a matching record in our database for the duration of the session (up to 30 days of inactivity).
(c) Usage data — card images you submit for scanning, the resulting metadata (card name, manufacturer, set, rarity, price estimate, etc.), per-scan token consumption, scan history, and the cards added to your collection.
(d) Payment data — subscription tier, subscription start/end timestamps, PayPal subscription IDs, and one-time top-up records (PayPal order ID, capture ID, amount paid, credited tokens). Your actual payment instrument details (card numbers, bank details) are processed exclusively by PayPal and never reach us.
(e) Preferences — your image-publishing consent setting (server-side); language preference and usage-view setting (browser-local only).
(f) Technical data — your IP address, browser user agent, and request timestamps are handled at the network level by our hosting provider Render Inc. for rate-limiting and access logging. We do not store these ourselves in our database.
We process the categories above for the following purposes, based on Art. 6 GDPR:
• Providing the service you contracted (account creation, scanning, collection management) — Art. 6(1)(b) — performance of contract.
• Processing card images via AI to identify cards and produce price estimates — Art. 6(1)(b).
• Billing via PayPal; retaining invoices and payment records — Art. 6(1)(b) and Art. 6(1)(c) — legal obligation (German tax law §147 AO requires invoice retention for 10 years).
• Rate limiting, abuse prevention and service security — Art. 6(1)(f) — legitimate interest in maintaining the integrity of the service.
• Sending verification and account emails — Art. 6(1)(b).
• Publishing your card images to other users of the service — only if you explicitly enable the "Use my card images publicly" setting; Art. 6(1)(a) — consent, revocable at any time.
• Translating AI-generated card descriptions into your selected language — Art. 6(1)(b).
Your data is shared only with the following service providers, strictly to the extent necessary to operate the service. None of these recipients use your data for advertising or sell it.
OpenAI, L.L.C. (United States) — receives card images and prompts to generate identification and pricing data. Per OpenAI's API terms, this data is not used to train OpenAI's models. Transfer protected by the EU Standard Contractual Clauses (Art. 46 GDPR). OpenAI Privacy Policy.
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) — payment processing. PayPal Privacy Statement.
Sender.net (Lithuania) — transactional email delivery (verification codes, account emails). EU-based processor.
Google LLC (United States) — public translation endpoint (translate.googleapis.com), used to translate AI-generated card descriptions into your selected display language. Only AI-generated card text is sent; no account identifiers, email, or images are transmitted. Transfer protected by Standard Contractual Clauses.
Render Services, Inc. (United States; with the application deployed in their Frankfurt, Germany data center) — hosting provider. Application data is stored on EU servers; the operating company is U.S.-based and acts as a sub-processor under Standard Contractual Clauses.
Some processors listed above are based in the United States. Transfers of personal data to the United States are based on the EU Standard Contractual Clauses (Art. 46 GDPR) concluded with the respective processor. Where the processor is U.S.-based but the data is physically stored in the EU (Render Frankfurt), data does not leave the EU in storage; only management/operational metadata may be processed by U.S. staff under the same safeguards. A copy of the SCCs is available on request.
Account data and content (email, password hash, card scans, collection, scan history, login tokens, email-change history, redemption-code links) — kept for as long as your account is active. Deleted on use of the in-app "Delete Account" function.
Payment records (subscription transactions, top-up records) — retained for 10 years as required by §147 AO (German tax law) and §257 HGB (commercial law). When you delete your account, these records are anonymized: the link to your user account is removed, but the transaction date, amount, and PayPal transaction IDs are retained for tax-audit purposes and can no longer be linked back to you.
Verification codes — deleted automatically 5 minutes after generation, or earlier upon successful use.
Login tokens — automatically deleted after 30 days of inactivity, on logout, or on subscription tier-down trim.
Server access logs and rate-limit data — handled at the infrastructure level by Render Inc.; retention according to Render's own terms (typically short-term, days to weeks).
Under the GDPR you have the following rights regarding your personal data:
• Access (Art. 15) — request a copy of the personal data we hold about you.
• Rectification (Art. 16) — correct inaccurate data.
• Erasure (Art. 17, "right to be forgotten") — delete your data via the in-app function, subject to the tax-retention obligation in §6.
• Restriction of processing (Art. 18).
• Data portability (Art. 20) — receive your data in a structured, commonly used, machine-readable format.
• Objection (Art. 21) — object to processing based on legitimate interests.
• Withdrawal of consent (Art. 7(3)) — withdraw any consent previously given (e.g. the public-images setting), without affecting the lawfulness of prior processing.
To exercise any of these rights, contact official.packstorm@gmail.com. We will respond within one month (Art. 12(3)).
You have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). The competent authority for the controller is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz
Germany
https://www.datenschutz.rlp.de
PackStorm is intended exclusively for users aged 18 and over and is not directed at children. We do not knowingly process personal data of persons under 18. If you become aware that a minor has registered, please contact us and we will delete the account.
PackStorm uses one strictly necessary cookie — an HTTP-only session token — and browser localStorage to remember your login, preferences and cached content. We do not use tracking cookies, analytics cookies, or third-party advertising cookies. No cookie consent banner is shown because no non-essential cookies are set.
Card identification, rarity scoring, and price estimates are produced by automated AI systems. These outputs do not have legal or similarly significant effects on you within the meaning of Art. 22 GDPR. The Service does not make automated decisions about you. AI outputs are informational estimates only and do not constitute financial, appraisal, or investment advice.
We implement technical and organisational measures appropriate to the risk under Art. 32 GDPR, including: TLS encryption for all client/server traffic, Argon2 password hashing, restricted server access, signed PayPal webhook verification, and short-lived authentication tokens.
This Privacy Policy may be updated as the service evolves. The version date at the top reflects the most recent change. Material changes will be notified by email to the address linked to your account before they take effect.
For any privacy-related request or question:
Hariton Stuckert
Hans-Kopp-Straße 11
67227 Frankenthal
Germany
Email: official.packstorm@gmail.com
Last updated: May 2026
Hariton Stuckert
Hans-Kopp-Straße 11
67227 Frankenthal
Germany
Email: official.packstorm@gmail.com
Hariton Stuckert (address as above)
The European Commission provides a platform for online dispute resolution (ODR), available at https://ec.europa.eu/consumers/odr. We are not obliged and not willing to participate in dispute resolution proceedings before a consumer arbitration board.
As a service provider we are responsible for our own content on these pages according to general laws under §7(1) TMG. However, according to §§ 8 to 10 TMG, we are not obliged to monitor transmitted or stored third-party information, or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general laws remain unaffected. Liability in this regard is only possible from the point in time at which a concrete infringement of the law becomes known. Upon notification of such infringements, we will remove the content concerned immediately.
Our offer contains links to external third-party websites whose contents we have no influence over. We therefore cannot accept any liability for these external contents. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent monitoring of the content of linked pages is not reasonable without concrete indications of an infringement. Upon notification of legal violations, we will remove such links immediately.
The content and works on these pages created by the site operator are subject to German copyright law. Duplication, processing, distribution, and any form of commercialization of such material beyond the scope of the copyright law require the prior written consent of the respective author or creator. Downloads and copies of these pages are only permitted for private, non-commercial use. Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is marked as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. Upon notification of legal violations, we will remove such content immediately.